mlsanityData to 14 Oct 2026

SHRED: Retain-Set-Free Unlearning via Self-Distillation with Logit Demotion

arXiv 2605.07482 ↗First posted 8 May 2026cs.LG cs.AIcited by 0

On the map: LLM safety and security → Machine unlearning

also in 1 more
Abstract (arXiv)

Machine unlearning for large language models (LLMs) aims to selectively remove memorized content such as private data, copyrighted text, or hazardous knowledge, without costly full retraining. Most existing methods require a retain set of curated examples to prevent catastrophic degradation of general model utility, creating an extra data dependency that complicates deployment. We propose SHRED (Self-distillation via High-surprisal-only Retain-set-free Entropy Demotion), a retain-set-free unlearning method built on a key insight: not all tokens within a forget set instance carry memorized information equally. High-information tokens concentrate the model's memorized knowledge, while low-information tokens reflect general language competence. SHRED operates in two stages. (1) Selection: We perform a forward pass on a forget set instance, collect per-token autoregressive probabilities, and select the bottom (lowest probability, highest Shannon information) as forget positions; the remaining positions are retained as benign anchors. (2) Training: We construct modified KL targets that demote the memorized token's logit at forget positions while preserving the original distribution at benign positions. The model is then trained via a single top KL self-distillation objective that simultaneously drives forgetting and utility preservation. We evaluate SHRED across four standard unlearning benchmarks and demonstrate that it establishes a new Pareto-optimal trade-off between forget efficacy and model utility, outperforming retain-set-dependent methods. Our analysis shows that SHRED is robust against relearning attacks and membership-inference attacks, and it maintains stable utility even after many sequential unlearning runs.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 28 of its 29 references that are in the map. First posted on arXiv 8 May 2026.

Builds on

28 of 29 references.

Closest ancestors · 15

Same direction, newest first

  1. 2025Hubble: a Model Suite to Advance the Study of LLM Memorization22 Oct
  2. 2025OpenUnlearning: Accelerating LLM Unlearning via Unified Benchmarking of Methods and Metrics14 Jun
  3. 2024Do Unlearning Methods Remove Information from Language Model Weights?11 Oct
  4. 2024Simplicity Prevails: Rethinking Negative Preference Optimization for LLM Unlearning9 Oct
  5. 2024An Adversarial Perspective on Machine Unlearning for AI Safety26 Sep
  6. 2024Unlearning or Obfuscating? Jogging the Memory of Unlearned LLMs via Benign Relearning19 Jun
  7. 2024Reversing the Forget-Retain Objectives: An Efficient LLM Unlearning Framework from Logit Difference12 Jun
  8. 2024RKLD: Reverse KL-Divergence-based Knowledge Distillation for Unlearning Personal Information in Large Language Models4 Jun
  9. 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearning8 Apr
  10. 2024Eight Methods to Evaluate Robust Unlearning in LLMs26 Feb
  11. 2024UNDIAL: Self-Distillation with Adjusted Logits for Robust Unlearning in Large Language Models15 Feb
  12. 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
3 more
  1. 2023Who's Harry Potter? Approximate Unlearning in LLMs3 Oct
  2. 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Models4 Oct
  3. 2022A Survey of Machine Unlearning6 Sep

Other references · 13

  1. 2015Distilling the Knowledge in a Neural Networkcited by 10,324
  2. 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
  3. 2020Extracting Training Data from Large Language Modelscited by 2,189
  4. 2022Editing Models with Task Arithmeticcited by 1,120
  5. 2019Machine Unlearningcited by 1,061
  6. 2022Quantifying Memorization Across Neural Language Modelscited by 763
  7. 2018Born Again Neural Networkscited by 546
  8. 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 509
  9. 2019Be Your Own Teacher: Improve the Performance of Convolutional Neural Networks via Self Distillationcited by 497
  10. 2023NLP Evaluation in trouble: On the Need to Measure LLM Data Contamination for each Benchmarkcited by 348
  11. 2026Self-Distillation Enables Continual Learningcited by 247
  12. 2019Multilingual Neural Machine Translation with Knowledge Distillationcited by 95
1 more
  1. 2024Is Bigger Edit Batch Size Always Better? -- An Empirical Study on Model Editing with Llama-3cited by 8

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2025Constrained Entropic Unlearning: A Primal-Dual Framework for Large Language Models
  2. 2026Confess What You Know: Forget-Set Misalignment with Model Knowledge in LLM Unlearning
  3. 2025BLUR: A Benchmark for LLM Unlearning Robust to Forget-Retain Overlap
  4. 2025Unlearning That Lasts: Utility-Preserving, Robust, and Almost Irreversible Forgetting in LLMs
  5. 2026Learning What to Forget: Improving LLM Unlearning via Learned Token-Level Importance
  6. 2025LLM Unlearning on Noisy Forget Sets: A Study of Incomplete, Rewritten, and Watermarked Data
  7. 2024A Closer Look at Machine Unlearning for Large Language Models
  8. 2026Not Every Change Is Necessary: Recoverable Drift in Large Language Model Unlearning